2.1

Adjusted Signal

2.1

Raw Pattern Score

100%

Time Factor

2026-10-31

Last Push

29.2K

Stars

TypeScript

Language

4.6M

Lines of Code

20.2K

Files

6.0K

Pattern Hits

2026-10-31

Scan Date

0.01

HC Hit Rate

Risk Review · Payload v1

Use each vector to guide manual verification of the underlying findings.

Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.

Cognitive Ownership Risk 6.5/100 · LOW

Can maintainers explain intent, assumptions, and trade-offs? 5135 finding(s).

Hallucinated Dependency & Supply Chain Risk 2.1/100 · LOW

Are imports declared and package/API names verified? 435 finding(s).

Agent Over-Engineering Ratio 5.2/100 · LOW

Are wrappers, guards, and repeated structures necessary? 3902 finding(s).

PR Review Velocity Impact 9.0/100 · LOW

Which changes need focused human review? 5991 finding(s).

What These Metrics Mean

Adjusted Signal: Legacy pattern score normalized per 1,000 scanned lines and multiplied by the repository-level time factor. It is not an estimate of AI authorship.
Raw Pattern Score: Sum of severity- and context-weighted pattern findings before applying the time factor.
Time Factor: A coarse multiplier based on repository last-push metadata. It does not identify when individual code was written.
Pattern Hits: Count of configured pattern findings. Review each location and surrounding code before acting.
HC Hit Rate: High- and critical-severity findings per scanned file. Severity is a configured detector weight, not proof of a vulnerability or authorship.
Lines / Files: Scan coverage denominators used by the legacy normalized score.

Pattern-Signal History

This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.

Severity Breakdown

Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.

CRITICAL 126HIGH 47MEDIUM 657LOW 5161

Directory Score Breakdown

This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.

Pattern Findings

The scanner identified 5991 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Hyper-Verbose Identifiers3481 hits · 3525 pts

Severity	File	Line	Snippet	Context
LOW	server-adapters/next/src/__tests__/next-adapter.test.ts	6	function createMastraWithHealthRoute(createHandlerImpl: () => Promise<void>) {	CODE
LOW	…adapters/express/src/__tests__/auth-middleware.test.ts	30	function createMastraWithSessionRefresh() {	CODE
LOW	…adapters-test-suite/src/custom-route-fga-test-suite.ts	28	export function createCustomRouteFGATestSuite(config: CustomRouteFGATestSuiteConfig) {	CODE
LOW	…adapters-test-suite/src/knowledge-routes-test-suite.ts	29	export function createKnowledgeRoutesTestSuite(config: KnowledgeRoutesTestSuiteConfig) {	CODE
LOW	…dapters/server-adapters-test-suite/src/test-helpers.ts	1326	async function setupWorkflowRegistryMocks(	CODE
LOW	…dapters/server-adapters-test-suite/src/test-helpers.ts	1414	function getRouteSpecificPathDefaults(route: ServerRoute): {	CODE
LOW	…dapters/server-adapters-test-suite/src/test-helpers.ts	1550	export function createStreamWithSensitiveData(format: 'v1' \| 'v2' = 'v2'): ReadableStream {	CODE
LOW	…dapters/server-adapters-test-suite/src/test-helpers.ts	1641	export function createStreamWithUnserializableChunk(): ReadableStream {	CODE
LOW	…dapters/server-adapters-test-suite/src/test-helpers.ts	1661	export function expectSerializedStreamChunks(chunks: any[]): void {	CODE
LOW	…-adapters-test-suite/src/structured-wake-test-suite.ts	20	export function createStructuredWakeTestSuite(config: StructuredWakeTestConfig) {	CODE
LOW	…er-adapters-test-suite/src/route-adapter-test-suite.ts	27	export function createRouteAdapterTestSuite(config: AdapterTestSuiteConfig) {	CODE
LOW	…ers/server-adapters-test-suite/src/route-test-utils.ts	38	export function getRouteSpecificSchemaDefaults(route: ServerRoute): {	CODE
LOW	…ers/server-adapters-test-suite/src/route-test-utils.ts	136	export function generateValidDataFromSchema(schema: z.ZodTypeAny, fieldName?: string): any {	CODE
LOW	…ers/server-adapters-test-suite/src/route-test-utils.ts	396	export function getDefaultValidPathParams(route: ServerRoute): Record<string, any> {	CODE
LOW	…ers/server-adapters-test-suite/src/route-test-utils.ts	488	export function getDefaultInvalidPathParams(route: ServerRoute): Array<Record<string, any>> {	CODE
LOW	…apters-test-suite/src/durable-disconnect-test-suite.ts	76	export function createDurableDisconnectTestSuite(config: DurableDisconnectTestConfig) {	CODE
LOW	…er-adapters-test-suite/src/mcp-transport-test-suite.ts	67	export function createMCPTransportTestSuite(config: MCPTransportTestConfig) {	CODE
LOW	…-adapters/elysia/src/__tests__/auth-middleware.test.ts	82	function createMastraWithSessionRefresh() {	CODE
LOW	server-adapters/hono/src/mcp-disconnect.ts	15	export function propagateClientDisconnect(	CODE
LOW	server-adapters/hono/src/__tests__/hono-adapter.test.ts	167	function createMastraWithObservabilityStore(observabilityStore: object) {	CODE
LOW	…s/hono/src/__tests__/approve-decline-no-memory.test.ts	165	function expectFullHistoryOnFinalRequest() {	CODE
LOW	…ver-adapters/hono/src/__tests__/mcp-disconnect.test.ts	28	function attachTransportCloseContract(res: { on: (event: string, cb: () => void) => void }) {	CODE
LOW	…o/src/__tests__/approve-tool-call-client-tools.test.ts	134	function expectStoppedForClientTool(chunks: Chunk[]) {	CODE
LOW	…er-adapters/hono/src/__tests__/auth-middleware.test.ts	27	function createMastraWithSessionRefresh() {	CODE
LOW	…ack-start/src/__tests__/tanstack-start-adapter.test.ts	97	function createMastraWithHealthRoute(createHandlerImpl: () => Promise<void>) {	CODE
LOW	…apters/fastify/src/__tests__/stream-disconnect.test.ts	65	async function createRequestWithAbortSignal(requestRaw: MockRawRequest, replyRaw: MockRawReply) {	CODE
LOW	…adapters/fastify/src/__tests__/auth-middleware.test.ts	26	function createMastraWithSessionRefresh() {	CODE
LOW	server-adapters/koa/src/index.ts	920	this.app.use(async function mastraCustomRouteDispatcher(ctx: Context, next: Next) {	CODE
LOW	…dapters/koa/src/__tests__/client-error-logging.test.ts	148	function throwLoggedNotImplemented(ctx: Koa.Context, error: unknown): never {	CODE
LOW	…ver-adapters/koa/src/__tests__/auth-middleware.test.ts	34	function createMastraWithSessionRefresh() {	CODE
LOW	…udflare/src/plugins/postgres-store-instance-checker.ts	5	export function postgresStoreInstanceChecker(): Plugin {	CODE
LOW	…loudflare/src/babel/postgres-store-instance-checker.ts	23	export function postgresStoreInstanceChecker(): PluginObject {	CODE
LOW	deployers/netlify/src/index.ts	38	function stubEdgeIncompatibleModules() {	CODE
LOW	deployers/sandbox/src/fake-sandbox.mock.ts	154	function workerExecutionIdFromScript(script: string): string {	CODE
LOW	auth/studio/src/index.ts	120	function readOrganizationIdFromProjectConfig(): string \| undefined {	CODE
LOW⚡	auth/google/src/auth-provider.ts	63	function getServerRedirectStateSuffix(state: string): string {	CODE
LOW⚡	auth/google/src/auth-provider.ts	68	function getStateTokenFromCallbackState(state: string): string {	CODE
LOW⚡	auth/google/src/auth-provider.ts	73	function verifyCallbackStateSuffix(callbackState: string, originalState: string): void {	CODE
LOW	auth/better-auth/src/index.ts	51	function mapBetterAuthUserToEEUser(user: User): EEUser {	CODE
LOW	auth/workos/src/auth-provider.ts	80	function isMembershipAlreadyExists(error: unknown): boolean {	CODE
LOW	auth/workos/src/fga-provider.ts	30	function isWorkOSResourceNotFoundError(error: any): boolean {	CODE
LOW	client-sdks/client-js/src/resources/agent.ts	167	function getClientToolObservabilityContext(toolCall: unknown): ClientToolObservabilityContext \| undefined {	CODE
LOW	client-sdks/client-js/src/resources/agent.ts	177	async function executeClientToolWithObservability({	CODE
LOW	client-sdks/client-js/src/resources/agent-controller.ts	215	export function isKnownAgentControllerEvent(event: AgentControllerEvent): event is KnownAgentControllerEvent {	CODE
LOW	client-sdks/client-js/src/resources/agent-controller.ts	1103	export function agentControllerMessageText(message: MastraDBMessage): string {	CODE
LOW	…ient-sdks/client-js/src/utils/process-mastra-stream.ts	4	async function sharedProcessMastraStream({	CODE
LOW	…ient-sdks/client-js/src/utils/process-mastra-stream.ts	55	export async function processMastraNetworkStream({	CODE
LOW	…dks/client-js/src/utils/verify-agent-card-signature.ts	91	export async function verifyAgentCardSignatureIfPresent(	CODE
LOW	client-sdks/client-js/src/utils/index.ts	131	export function parseClientRequestContext(requestContext?: RequestContext \| Record<string, any>) {	CODE
LOW	client-sdks/client-js/src/utils/index.ts	158	export function requestContextQueryString(	CODE
LOW	client-sdks/client-js/src/observability/collector.ts	324	export function getCurrentObservabilityCollector(): ObservabilityCollector \| undefined {	CODE
LOW	client-sdks/ai-sdk/src/middleware.ts	455	export function createProcessorMiddleware(options: ProcessorMiddlewareOptions): LanguageModelV2Middleware {	CODE
LOW	client-sdks/ai-sdk/src/middleware.ts	856	function extractTextFromMastraMessage(msg: MastraDBMessage): string {	CODE
LOW	client-sdks/ai-sdk/src/middleware.ts	876	function convertMastraChunkToAISDKStreamPart(chunk: ChunkType): LanguageModelV2StreamPart \| null {	CODE
LOW	client-sdks/ai-sdk/src/helpers.ts	96	function normalizeToolPayloadState(state: unknown): TransformedToolPayloadState \| undefined {	CODE
LOW	client-sdks/ai-sdk/src/helpers.ts	113	function getTransformedToolPayload(	CODE
LOW	client-sdks/ai-sdk/src/helpers.ts	126	function hasTransformedToolPayload(	CODE
LOW	client-sdks/ai-sdk/src/helpers.ts	132	function convertBackgroundTaskChunkToDataChunk(chunk: ChunkType): DataChunkType \| undefined {	CODE
LOW	client-sdks/ai-sdk/src/helpers.ts	637	function createToolOutputAncestryEntry(toolCallId: string, toolName?: string): ToolOutputAncestryEntry {	CODE
LOW	client-sdks/ai-sdk/src/helpers.ts	652	function normalizeNestedToolOutput(part: ConvertedToolOutput): NormalizedToolOutput \| undefined {	CODE
3421 more matches not shown…

Hallucination Indicators126 hits · 1355 pts

Severity	File	Line	Snippet	Context
CRITICAL	…dynamodb/src/storage/domains/background-tasks/index.ts	303	const res = await this.service.entities.background_task.scan.go({ pages: 'all' });	CODE
CRITICAL	stores/dynamodb/src/storage/domains/memory/index.ts	483	messageIds.map(id => this.service.entities.message.query.primary({ entity: 'message', id }).go()),	CODE
CRITICAL	stores/dynamodb/src/storage/domains/memory/index.ts	636	this.service.entities.message.query.byThread({ entity: 'message', threadId: tid }),	CODE
CRITICAL⚡	stores/dynamodb/src/storage/domains/memory/index.ts	658	const baseQuery = this.service.entities.message.query.byThread({ entity: 'message', threadId: threadIds[0]! });	CODE
CRITICAL	stores/dynamodb/src/storage/domains/memory/index.ts	894	: (await this.service.entities.thread.scan.go({ pages: 'all' })).data;	CODE
CRITICAL	stores/dynamodb/src/storage/domains/workflows/index.ts	675	query = this.service.entities.workflow_snapshot.query.primary({	CODE
CRITICAL	stores/dynamodb/src/storage/domains/scores/index.ts	218	const query = this.service.entities.score.query.byScorer({ entity: 'score', scorerId });	CODE
CRITICAL	stores/dynamodb/src/storage/domains/scores/index.ts	290	const query = this.service.entities.score.query.byRun({ entity: 'score', runId });	CODE
CRITICAL	stores/dynamodb/src/storage/domains/scores/index.ts	346	const query = this.service.entities.score.query.byEntityData({ entity: 'score', entityId });	CODE
CRITICAL	stores/dynamodb/src/storage/domains/scores/index.ts	405	const query = this.service.entities.score.query.bySpan({ entity: 'score', traceId, spanId });	CODE
CRITICAL	stores/vectorize/src/vector/index.ts	242	await this.client.vectorize.indexes.metadataIndex.create(indexName, {	CODE
CRITICAL	stores/vectorize/src/vector/index.ts	262	await this.client.vectorize.indexes.metadataIndex.delete(indexName, {	CODE
CRITICAL	stores/vectorize/src/vector/index.ts	281	const res = await this.client.vectorize.indexes.metadataIndex.list(indexName, {	CODE
CRITICAL	…xamples/otel-bridge/hono-multi/src/integration.test.ts	109	return data.data.getTraceByOtelId.spans.edges.map((edge: any) => {	CODE
CRITICAL	workspaces/blaxel/src/sandbox/index.test.ts	1305	const fusermountCalls = mockSandbox.process.exec.mock.calls.filter((c: any[]) =>	CODE
CRITICAL	workspaces/blaxel/src/sandbox/index.test.ts	1365	const fusermountCalls = mockSandbox.process.exec.mock.calls.filter((c: any[]) =>	CODE
CRITICAL	workspaces/blaxel/src/sandbox/index.test.ts	1424	const fusermountCalls = mockSandbox.process.exec.mock.calls.filter((c: any[]) =>	CODE
CRITICAL	workspaces/blaxel/src/sandbox/index.test.ts	1500	const rmCalls = mockSandbox.process.exec.mock.calls.filter(	CODE
CRITICAL	workspaces/blaxel/src/sandbox/index.test.ts	1505	const rmdirCalls = mockSandbox.process.exec.mock.calls.filter(	CODE
CRITICAL	workspaces/blaxel/src/sandbox/index.test.ts	1579	const rmCalls = mockSandbox.process.exec.mock.calls.filter(	CODE
CRITICAL	workspaces/blaxel/src/sandbox/index.test.ts	1623	const procMountsCalls = mockSandbox.process.exec.mock.calls.filter((c: any[]) =>	CODE
CRITICAL	workspaces/blaxel/src/sandbox/index.test.ts	1628	const fusermountCalls = mockSandbox.process.exec.mock.calls.filter((c: any[]) =>	CODE
CRITICAL	workspaces/blaxel/src/sandbox/index.test.ts	1659	const procMountsCalls = mockSandbox.process.exec.mock.calls.filter((c: any[]) =>	CODE
CRITICAL	workspaces/blaxel/src/sandbox/index.test.ts	1718	const fusermountCalls = mockSandbox.process.exec.mock.calls.filter((call: any[]) =>	CODE
CRITICAL	workspaces/daytona/src/sandbox/index.test.ts	789	const probed = mockSandbox.process.executeCommand.mock.calls.some(call => call[0] === 'pwd');	CODE
CRITICAL	workspaces/daytona/src/sandbox/index.test.ts	801	const probed = mockSandbox.process.executeCommand.mock.calls.some(call => call[0] === 'pwd');	CODE
CRITICAL	workspaces/daytona/src/sandbox/index.test.ts	865	mockSandbox.process.executeCommand.mock.calls.some(([command]) =>	CODE
CRITICAL	workspaces/daytona/src/sandbox/index.test.ts	884	const commands = mockSandbox.process.executeCommand.mock.calls.map(([command]) => command);	CODE
CRITICAL	workspaces/daytona/src/sandbox/index.test.ts	927	expect(mockSandbox.process.executeCommand.mock.calls.some(([command]) => command.includes('pkill'))).toBe(false);	CODE
CRITICAL	workspaces/daytona/src/sandbox/index.test.ts	947	mockSandbox.process.executeCommand.mock.calls.some(([command]) => command.includes('sudo fusermount -u ')),	CODE
CRITICAL	workspaces/daytona/src/sandbox/index.test.ts	1001	const mountCall = mockSandbox.process.executeCommand.mock.calls.find((call: any[]) => {	CODE
CRITICAL	workspaces/daytona/src/sandbox/index.test.ts	1031	mockSandbox.process.executeCommand.mock.calls.find((call: any[]) => {	CODE
CRITICAL	workspaces/daytona/src/sandbox/index.test.ts	1037	const upload = mockSandbox.fs.uploadFile.mock.calls.find((call: any[]) =>	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	1411	const [, runOpts] = mockSandbox.commands.run.mock.calls.at(-1)!;	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	1802	mockSandbox.commands.run.mock.calls.some(	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	1830	mockSandbox.commands.run.mock.calls.some(	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	1942	const writeCall = mockSandbox.files.write.mock.calls.find((call: any[]) =>	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	1952	const calls = mockSandbox.commands.run.mock.calls.map((call: any[]) => call[0] as string);	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	1992	const writeCall = mockSandbox.files.write.mock.calls.find((call: any[]) =>	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	1996	const calls = mockSandbox.commands.run.mock.calls.map((call: any[]) => call[0] as string);	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2026	mockSandbox.files.write.mock.calls.some((call: any[]) => String(call[0]).startsWith('/tmp/.passwd-s3fs-')),	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2192	return mockSandbox.commands.run.mock.calls.find(	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2199	const writeCall = mockSandbox.files.write.mock.calls.find((call: any[]) =>	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2575	const fusermountCalls = mockSandbox.commands.run.mock.calls.filter((c: any[]) => c[0].includes('fusermount'));	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2600	const fusermountCalls = mockSandbox.commands.run.mock.calls.filter((c: any[]) => c[0].includes('fusermount'));	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2621	const fusermountCalls = mockSandbox.commands.run.mock.calls.filter((c: any[]) => c[0].includes('fusermount'));	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2648	const rmCalls = mockSandbox.commands.run.mock.calls.filter(	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2654	const rmdirCalls = mockSandbox.commands.run.mock.calls.filter(	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2682	const rmCalls = mockSandbox.commands.run.mock.calls.filter(	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2714	const fusermountCalls = mockSandbox.commands.run.mock.calls.filter((c: any[]) => c[0].includes('fusermount'));	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2743	const fusermountCalls = mockSandbox.commands.run.mock.calls.filter((c: any[]) => c[0].includes('fusermount'));	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2766	const rmCalls = mockSandbox.commands.run.mock.calls.filter(	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2803	const procMountsCalls = mockSandbox.commands.run.mock.calls.filter((c: any[]) => c[0].includes('/proc/mounts'));	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2807	const fusermountCalls = mockSandbox.commands.run.mock.calls.filter((c: any[]) => c[0].includes('fusermount'));	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2831	const procMountsCalls = mockSandbox.commands.run.mock.calls.filter((c: any[]) => c[0].includes('/proc/mounts'));	CODE
CRITICAL	workspaces/e2b/src/sandbox/index.test.ts	2875	const fusermountCalls = mockSandbox.commands.run.mock.calls.filter((call: any[]) => call[0].includes('fusermount'));	CODE
CRITICAL	mastracode/tui/src/tui/__tests__/status-line.test.ts	209	state.controller.session.model.get.mockReturnValue('openai/gpt-5');	CODE
CRITICAL	mastracode/tui/src/tui/__tests__/status-line.test.ts	235	state.controller.session.model.get.mockReturnValue('openai/gpt-5');	CODE
CRITICAL	mastracode/tui/src/tui/__tests__/status-line.test.ts	249	aborted.controller.session.model.get.mockReturnValue('openai/gpt-5');	CODE
CRITICAL	mastracode/tui/src/tui/__tests__/status-line.test.ts	261	errored.controller.session.model.get.mockReturnValue('openai/gpt-5');	CODE
66 more matches not shown…

Decorative Section Separators421 hits · 1326 pts

Severity	File	Line	Snippet	Context
MEDIUM	auth/workos/src/fga-provider.ts	136	// ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	auth/workos/src/fga-provider.ts	138	// ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	auth/workos/src/fga-provider.ts	268	// ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	auth/workos/src/fga-provider.ts	270	// ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	auth/workos/src/fga-provider.ts	408	// ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	auth/workos/src/fga-provider.ts	410	// ──────────────────────────────────────────────────────────────	COMMENT
MEDIUM	client-sdks/client-js/src/types.ts	1903	// ── v2 surface: authorize / connections / fields / status / health ──────────	COMMENT
MEDIUM	workflows/_test-utils/src/normal-agent-executor.test.ts	167	// ── Durable-only machinery (no plain-Agent equivalent) ──────────────	COMMENT
MEDIUM	workflows/_test-utils/src/normal-agent-executor.test.ts	175	// ── Prepare/workflowInput-pinned domains ────────────────────────────	COMMENT
MEDIUM	stores/mongodb/src/storage/index.test.ts	953	// ─── Hardening: NODE-7556 ────────────────────────────────────────────────────	COMMENT
MEDIUM	stores/mongodb/src/storage/index.test.ts	1122	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	stores/mongodb/src/vector/index.test.ts	344	// ─── Hardening: NODE-7556 ───────────────────────────────────────────────────	COMMENT
MEDIUM	stores/mongodb/src/vector/index.test.ts	408	// ─────────────────────────────────────────────────────────────────────────────	COMMENT
MEDIUM	stores/mongodb/src/vector/index.test.ts	1249	// ─── BYO write guard: read-only by default, writes are opt-in ────────────────────────	COMMENT
MEDIUM	stores/mongodb/src/vector/index.test.ts	1420	// ─── Round 5 external-review fixes (unit): registry integrity & drop safety ──────────	COMMENT
MEDIUM	stores/mongodb/src/vector/index.test.ts	1622	// ─── Round 4 external-review fixes (unit) ────────────────────────────────────────────	COMMENT
MEDIUM	stores/mongodb/src/vector/index.test.ts	1930	// ─── Durability: BYO target survives a process restart (registry-backed) ─────────────	COMMENT
MEDIUM	stores/mongodb/src/vector/index.test.ts	2004	// ─── listIndexes returns LOGICAL index names ─────────────────────────────────────────	COMMENT
MEDIUM	stores/mongodb/src/vector/index.test.ts	2149	// ─── FIX 2: BYO collections with native ObjectId _ids (string-id contract) ───────────────	COMMENT
MEDIUM	stores/mongodb/src/vector/index.test.ts	2251	// ─── FIX 8: describeIndex counts only documents with the embedding field ─────────────────	COMMENT
MEDIUM	stores/mongodb/src/vector/index.test.ts	2374	// ─── Automated Embedding (autoEmbed indexes) ─────────────────────────────────────────────	COMMENT
MEDIUM	stores/mongodb/src/vector/index.test.ts	3302	// ─── Live Automated Embedding ────────────────────────────────────────────────────────────	COMMENT
MEDIUM	docs/tests/navigation.spec.ts	134	// ─── Sidebar navigation tests ──────────────────────────────────────────	COMMENT
MEDIUM	docs/tests/navigation.spec.ts	225	// ─── Contextual sidebar navigation ────────────────────────────────────	COMMENT
MEDIUM	docs/tests/navigation.spec.ts	641	// ─── Admonitions and tabs on /integrations/agentic-ui/ai-sdk-ui ───────	COMMENT
MEDIUM	docs/styles/ai-tells/ExplainerLeads.yml	9	# ==========================================================================	COMMENT
MEDIUM	docs/styles/ai-tells/ExplainerLeads.yml	16	# ==========================================================================	COMMENT
MEDIUM	docs/styles/ai-tells/MicDrop.yml	7	# ==========================================================================	COMMENT
MEDIUM	docs/styles/ai-tells/MicDrop.yml	14	# ==========================================================================	COMMENT
MEDIUM⚡	docs/styles/ai-tells/ColloquialAssessments.yml	8	# ==========================================================================	COMMENT
MEDIUM⚡	docs/styles/ai-tells/ColloquialAssessments.yml	13	# ==========================================================================	COMMENT
MEDIUM⚡	docs/styles/ai-tells/ColloquialAssessments.yml	23	# ==========================================================================	COMMENT
MEDIUM⚡	docs/styles/ai-tells/ColloquialAssessments.yml	26	# ==========================================================================	COMMENT
MEDIUM⚡	docs/styles/ai-tells/ColloquialAssessments.yml	37	# ==========================================================================	COMMENT
MEDIUM⚡	docs/styles/ai-tells/ColloquialAssessments.yml	40	# ==========================================================================	COMMENT
MEDIUM⚡	docs/styles/ai-tells/ColloquialAssessments.yml	49	# ==========================================================================	COMMENT
MEDIUM⚡	docs/styles/ai-tells/ColloquialAssessments.yml	55	# ==========================================================================	COMMENT
MEDIUM	docs/styles/ai-tells/VerbTricolon.yml	7	# ==========================================================================	COMMENT
MEDIUM	docs/styles/ai-tells/VerbTricolon.yml	22	# ==========================================================================	COMMENT
MEDIUM	docs/styles/ai-tells/VerbTricolon.yml	65	# ==========================================================================	COMMENT
MEDIUM	docs/styles/ai-tells/VerbTricolon.yml	72	# ==========================================================================	COMMENT
MEDIUM	docs/styles/ai-tells/CataphoricForecasting.yml	7	# ==========================================================================	COMMENT
MEDIUM	docs/styles/ai-tells/CataphoricForecasting.yml	20	# ==========================================================================	COMMENT
MEDIUM	…paces/agentfs/src/filesystem/index.integration.test.ts	40	// ─── Basic Integration Tests ─────────────────────────────────────────────────	COMMENT
MEDIUM	…paces/agentfs/src/filesystem/index.integration.test.ts	170	// ─── Agent Isolation Tests ───────────────────────────────────────────────────	COMMENT
MEDIUM	…paces/agentfs/src/filesystem/index.integration.test.ts	240	// ─── CompositeFilesystem Integration Tests ───────────────────────────────────	COMMENT
MEDIUM	…paces/agentfs/src/filesystem/index.integration.test.ts	273	// ─── Shared Conformance Test Suite ───────────────────────────────────────────	COMMENT
MEDIUM	…factory-ui/src/ui/domains/settings/services/density.ts	8	// ── Density preference ────────────────────────────────────────────────────	COMMENT
MEDIUM	mastracode/factory-ui/src/api/types.ts	65	// ── GET response envelopes ─────────────────────────────────────────────────	COMMENT
MEDIUM	mastracode/factory-ui/src/api/types.ts	104	// ── Mutation request bodies ────────────────────────────────────────────────	COMMENT
MEDIUM	mastracode/factory-ui/src/api/types.ts	150	// ── Mutation response envelopes ────────────────────────────────────────────	COMMENT
MEDIUM	mastracode/tui/src/tui/state.ts	222	// ── Core dependencies (set once) ──────────────────────────────────────	COMMENT
MEDIUM	mastracode/tui/src/tui/state.ts	237	// ── TUI framework (set once) ──────────────────────────────────────────	COMMENT
MEDIUM	mastracode/tui/src/tui/state.ts	254	// ── Agent / streaming ─────────────────────────────────────────────────	COMMENT
MEDIUM	mastracode/tui/src/tui/state.ts	291	// ── Thread / conversation ─────────────────────────────────────────────	COMMENT
MEDIUM	mastracode/tui/src/tui/state.ts	307	// ── Inline interaction ────────────────────────────────────────────────	COMMENT
MEDIUM	mastracode/tui/src/tui/state.ts	345	// ── Status line ───────────────────────────────────────────────────────	COMMENT
MEDIUM	mastracode/tui/src/tui/state.ts	363	// ── Tokens/sec tracking ────────────────────────────────────────────────	COMMENT
MEDIUM⚡	mastracode/tui/src/tui/state.ts	377	// ── Observational Memory ──────────────────────────────────────────────	COMMENT
MEDIUM⚡	mastracode/tui/src/tui/state.ts	384	// ── Tasks ─────────────────────────────────────────────────────────────	COMMENT
361 more matches not shown…

Structural Annotation Overuse436 hits · 775 pts

Severity	File	Line	Snippet	Context
LOW	DEVELOPMENT.md	85	### Step 1: Make your changes	COMMENT
LOW	DEVELOPMENT.md	89	### Step 2: Build the packages	COMMENT
LOW	DEVELOPMENT.md	109	### Step 3: Test your changes	COMMENT
LOW	.cursor/commands/gh-fix-lint.md	10	## Step 1: Get PR Information	COMMENT
LOW	.cursor/commands/gh-fix-lint.md	22	## Step 2: Check for Clean Working Directory	COMMENT
LOW	.cursor/commands/gh-fix-lint.md	30	## Step 3: Fetch and Checkout the Branch	COMMENT
LOW⚡	.cursor/commands/gh-fix-lint.md	42	## Step 4: Run Lint and Format Fixes	COMMENT
LOW⚡	.cursor/commands/gh-fix-lint.md	49	## Step 5: Check for Changes	COMMENT
LOW⚡	.cursor/commands/gh-fix-lint.md	57	## Step 6: Commit and Push	COMMENT
LOW	.cursor/commands/gh-fix-lint.md	70	## Step 7: Return to Original Branch	COMMENT
LOW⚡	.cursor/commands/ralph-plan.md	38	### Step 1: Understand the Goal	COMMENT
LOW⚡	.cursor/commands/ralph-plan.md	46	### Step 2: Define Background	COMMENT
LOW⚡	.cursor/commands/ralph-plan.md	53	### Step 3: Plan Setup Steps	COMMENT
LOW⚡	.cursor/commands/ralph-plan.md	61	### Step 4: Break Down Tasks	COMMENT
LOW⚡	.cursor/commands/ralph-plan.md	70	### Step 5: Define Testing	COMMENT
LOW	.mastracode/commands/gh-fix-lint.md	10	## Step 1: Get PR Information	COMMENT
LOW	.mastracode/commands/gh-fix-lint.md	22	## Step 2: Check for Clean Working Directory	COMMENT
LOW	.mastracode/commands/gh-fix-lint.md	30	## Step 3: Fetch and Checkout the Branch	COMMENT
LOW⚡	.mastracode/commands/gh-fix-lint.md	42	## Step 4: Run Lint and Format Fixes	COMMENT
LOW⚡	.mastracode/commands/gh-fix-lint.md	49	## Step 5: Check for Changes	COMMENT
LOW⚡	.mastracode/commands/gh-fix-lint.md	57	## Step 6: Commit and Push	COMMENT
LOW	.mastracode/commands/gh-fix-lint.md	70	## Step 7: Return to Original Branch	COMMENT
LOW⚡	.mastracode/commands/ralph-plan.md	38	### Step 1: Understand the Goal	COMMENT
LOW⚡	.mastracode/commands/ralph-plan.md	46	### Step 2: Define Background	COMMENT
LOW⚡	.mastracode/commands/ralph-plan.md	53	### Step 3: Plan Setup Steps	COMMENT
LOW⚡	.mastracode/commands/ralph-plan.md	61	### Step 4: Break Down Tasks	COMMENT
LOW⚡	.mastracode/commands/ralph-plan.md	70	### Step 5: Define Testing	COMMENT
LOW	client-sdks/react/src/hooks/mcps/use-try-connect-mcp.ts	44	// Step 1: Initialize	COMMENT
LOW	client-sdks/react/src/hooks/mcps/use-try-connect-mcp.ts	75	// Step 2: Send initialized notification	COMMENT
LOW	client-sdks/react/src/hooks/mcps/use-try-connect-mcp.ts	86	// Step 3: List tools	COMMENT
LOW	explorations/agent-network-vs-ralph-wiggum.md	276	// Step 1: Run LLM completion assessment (existing behavior)	COMMENT
LOW	explorations/agent-network-vs-ralph-wiggum.md	282	// Step 2: If validation configured, run programmatic checks	COMMENT
LOW	explorations/longmemeval/docs/INVESTIGATION_WORKFLOW.md	44	### Step 1: Find Failures to Investigate	COMMENT
LOW	explorations/longmemeval/docs/INVESTIGATION_WORKFLOW.md	55	### Step 2: Setup Investigation	COMMENT
LOW	explorations/longmemeval/docs/INVESTIGATION_WORKFLOW.md	77	### Step 3: Investigate Each Question	COMMENT
LOW	explorations/longmemeval/docs/INVESTIGATION_WORKFLOW.md	144	### Step 4: Document Findings	COMMENT
LOW	explorations/longmemeval/docs/INVESTIGATION_WORKFLOW.md	181	### Step 5: Mark as Investigated	COMMENT
LOW	explorations/longmemeval/docs/INVESTIGATION_WORKFLOW.md	193	### Step 6: Implement Fixes	COMMENT
LOW	explorations/longmemeval/docs/INVESTIGATION_WORKFLOW.md	214	### Step 7: Mark as Fixed	COMMENT
LOW	explorations/longmemeval/docs/INVESTIGATION_WORKFLOW.md	220	### Step 8: Sync to Dataset	COMMENT
LOW	.opencode/command/gh-fix-lint.md	10	## Step 1: Get PR Information	COMMENT
LOW	.opencode/command/gh-fix-lint.md	22	## Step 2: Check for Clean Working Directory	COMMENT
LOW	.opencode/command/gh-fix-lint.md	30	## Step 3: Fetch and Checkout the Branch	COMMENT
LOW⚡	.opencode/command/gh-fix-lint.md	42	## Step 4: Run Lint and Format Fixes	COMMENT
LOW⚡	.opencode/command/gh-fix-lint.md	49	## Step 5: Check for Changes	COMMENT
LOW⚡	.opencode/command/gh-fix-lint.md	57	## Step 6: Commit and Push	COMMENT
LOW	.opencode/command/gh-fix-lint.md	70	## Step 7: Return to Original Branch	COMMENT
LOW⚡	.opencode/command/ralph-plan.md	38	### Step 1: Understand the Goal	COMMENT
LOW⚡	.opencode/command/ralph-plan.md	46	### Step 2: Define Background	COMMENT
LOW⚡	.opencode/command/ralph-plan.md	53	### Step 3: Plan Setup Steps	COMMENT
LOW⚡	.opencode/command/ralph-plan.md	61	### Step 4: Break Down Tasks	COMMENT
LOW⚡	.opencode/command/ralph-plan.md	70	### Step 5: Define Testing	COMMENT
LOW⚡	workflows/_test-utils/src/domains/foreach.ts	269	// Step 1: Generate items to iterate over - outputs an array	COMMENT
LOW⚡	workflows/_test-utils/src/domains/foreach.ts	279	// Step 2: Transform each item (used in foreach)	COMMENT
LOW⚡	workflows/_test-utils/src/domains/foreach.ts	287	// Step 3: Sum all results	COMMENT
LOW⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	216	// Step 1: Execute LLM	COMMENT
LOW⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	218	// Step 2: Extract tool calls as array for foreach (forward model_step span for nesting)	COMMENT
LOW⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	272	// Step 5: Map tool results back to state	COMMENT
LOW⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	274	// Step 6: Check for pending background tasks	COMMENT
LOW⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	276	// Step 7: Map back to iteration state format using shared function	COMMENT
376 more matches not shown…

Verbosity Indicators341 hits · 597 pts

Severity	File	Line	Snippet	Context
LOW	client-sdks/react/src/hooks/mcps/use-try-connect-mcp.ts	44	// Step 1: Initialize	COMMENT
LOW	client-sdks/react/src/hooks/mcps/use-try-connect-mcp.ts	75	// Step 2: Send initialized notification	COMMENT
LOW	client-sdks/react/src/hooks/mcps/use-try-connect-mcp.ts	86	// Step 3: List tools	COMMENT
LOW⚡	workflows/_test-utils/src/domains/foreach.ts	269	// Step 1: Generate items to iterate over - outputs an array	COMMENT
LOW⚡	workflows/_test-utils/src/domains/foreach.ts	279	// Step 2: Transform each item (used in foreach)	COMMENT
LOW⚡	workflows/_test-utils/src/domains/foreach.ts	287	// Step 3: Sum all results	COMMENT
LOW⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	216	// Step 1: Execute LLM	COMMENT
LOW⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	218	// Step 2: Extract tool calls as array for foreach (forward model_step span for nesting)	COMMENT
LOW⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	272	// Step 5: Map tool results back to state	COMMENT
LOW⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	274	// Step 6: Check for pending background tasks	COMMENT
LOW⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	276	// Step 7: Map back to iteration state format using shared function	COMMENT
LOW⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	304	// Step 8: isTaskComplete scorers, then goal evaluation, as in core's durable loop.	COMMENT
LOW	…t/src/durable-agent/create-inngest-agentic-workflow.ts	182	// Step 0: Convert iteration state to LLM input format	COMMENT
LOW	…t/src/durable-agent/create-inngest-agentic-workflow.ts	232	// Step 3: Execute each tool call individually (with suspend support).	COMMENT
LOW	…t/src/durable-agent/create-inngest-agentic-workflow.ts	249	// Step 4: Collect tool results and bundle with LLM output for mapping step.	COMMENT
LOW	…ores/cloudflare-d1/src/storage/domains/memory/index.ts	996	// Step 1: Get paginated messages from the thread first (without excluding included ones)	COMMENT
LOW	…ores/cloudflare-d1/src/storage/domains/memory/index.ts	1127	// Step 2: Add included messages with context (if any), excluding duplicates	COMMENT
LOW	stores/clickhouse/src/storage/domains/memory/index.ts	280	// Step 1: Get paginated messages from the thread(s) first (without excluding included ones)	COMMENT
LOW	stores/clickhouse/src/storage/domains/memory/index.ts	435	// Step 2: Add included messages with context (if any), excluding duplicates	COMMENT
LOW⚡	stores/clickhouse/src/storage/db/index.ts	396	// Step 1: Rename old table to backup	COMMENT
LOW⚡	stores/clickhouse/src/storage/db/index.ts	401	// Step 2: Create new table with correct sorting key	COMMENT
LOW	stores/clickhouse/src/storage/db/index.ts	440	// Step 3: Copy data from backup to new table, deduplicating by (traceId, spanId)	COMMENT
LOW	stores/clickhouse/src/storage/db/index.ts	475	// Step 4: Drop backup table	COMMENT
LOW	…ores/cloudflare/src/kv/storage/domains/memory/index.ts	911	// Step 1: Get thread messages from all specified threads (for pagination)	COMMENT
LOW	…ores/cloudflare/src/kv/storage/domains/memory/index.ts	976	// Step 2: Get included messages separately (not subject to pagination)	COMMENT
LOW	…ores/cloudflare/src/kv/storage/domains/memory/index.ts	992	// Step 3: Combine paginated + included messages, deduplicate	COMMENT
LOW	…ores/cloudflare/src/do/storage/domains/memory/index.ts	974	// Step 1: Get paginated messages from the thread(s) first (without excluding included ones)	COMMENT
LOW	…ores/cloudflare/src/do/storage/domains/memory/index.ts	1089	// Step 2: Add included messages with context (if any), excluding duplicates	COMMENT
LOW	stores/lance/src/storage/domains/memory/index.ts	406	// Step 1: Get paginated messages from the thread first (without excluding included ones)	COMMENT
LOW	stores/lance/src/storage/domains/memory/index.ts	451	// Step 2: Add included messages with context (if any), excluding duplicates	COMMENT
LOW⚡	stores/dynamodb/src/storage/domains/memory/index.ts	657	// Step 1: Query messages from the thread via byThread GSI (createdAt sort key).	COMMENT
LOW	stores/dynamodb/src/storage/domains/memory/index.ts	690	// Step 2: Add included messages with context (if any), excluding duplicates	COMMENT
LOW	stores/mongodb/src/storage/migration.test.ts	54	// Step 1: Insert documents with ONLY old schema fields (simulating pre-migration data)	COMMENT
LOW⚡	stores/mongodb/src/storage/migration.test.ts	103	// Step 2: Verify documents exist	COMMENT
LOW⚡	stores/mongodb/src/storage/migration.test.ts	107	// Step 3: Initialize store (which creates indexes but doesn't modify document structure)	COMMENT
LOW⚡	stores/mongodb/src/storage/migration.test.ts	110	// Step 4: Query via storage API - should work with old documents	COMMENT
LOW	stores/mongodb/src/storage/migration.test.ts	128	// Step 5: Verify new fields are null/undefined for old documents	COMMENT
LOW	stores/mongodb/src/storage/domains/memory/index.ts	671	// Step 1: Get paginated messages from the thread first (without excluding included ones)	COMMENT
LOW	stores/mongodb/src/storage/domains/memory/index.ts	712	// Step 2: Add included messages with context (if any), excluding duplicates	COMMENT
LOW	stores/mongodb/src/storage/domains/memory/index.ts	850	// Step 1: Get paginated messages	COMMENT
LOW	stores/mongodb/src/storage/domains/memory/index.ts	891	// Step 2: Add included messages with context (if any), excluding duplicates	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	195	// Step 3: Call createTable which should trigger migration	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	198	// Step 4: Verify new columns exist	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	224	// Step 5: Verify original columns still exist	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	234	// Step 6: Verify data is still queryable after migration	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	264	// Step 7: Verify new columns have NULL values for existing data (since they didn't exist before)	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	270	// Step 8: Verify we can insert new data with the new columns	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	329	// Step 2: Verify timezone columns do NOT exist before migration	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	338	// Step 3: Insert test data	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	357	// Step 4: Run the migration by calling createTable (which internally calls migrateSpansTable)	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	361	// Step 5: Verify timezone columns DON'T exist after migration (this is the bug!)	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	1383	// Step 3: Run the migration SQL	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	1390	// Step 4: Verify column type is now JSONB	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	1398	// Step 5: Verify all data was preserved	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	1423	// Step 6: Verify JSONB operators work after migration	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	1429	// Step 7: Verify we can insert new data with JSONB	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	1558	// Step 3: Run the migration SQL	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	1565	// Step 4: Verify column type is now JSONB	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	1573	// Step 5: Verify all data was preserved	COMMENT
LOW⚡	stores/pg/src/storage/migration.test.ts	1594	// Step 6: Verify JSONB operators work after migration	COMMENT
281 more matches not shown…

Over-Commented Block587 hits · 578 pts

Severity	File	Line	Snippet	Context
LOW	pnpm-workspace.yaml	321	# Security fix for GHSA middleware-based route protection bypass (CVE).	COMMENT
LOW	pnpm-workspace.yaml	601	'yocto-spinner': 'npm:@socketregistry/yocto-spinner@^1'	COMMENT
LOW	…er-adapters-test-suite/src/route-adapter-test-suite.ts	401	// and are tested separately via mcp-transport-test-suite	COMMENT
LOW	…er-adapters-test-suite/src/route-adapter-test-suite.ts	461	// Covered by packages/server/src/server/handlers/mcp-events.test.ts.	COMMENT
LOW	…er-adapters-test-suite/src/route-adapter-test-suite.ts	481	// 'test-connection-id' that isn't seeded, so the fail-closed ownership	COMMENT
LOW	server-adapters/hono/src/browser-stream/index.ts	161	const { injectWebSocket, upgradeWebSocket } = createNodeWebSocket({ app });	COMMENT
LOW	server-adapters/hono/src/browser-stream/index.ts	181	// `apiPrefix`. Because browsers cannot set an `Authorization` header on a	COMMENT
LOW	…c/__tests__/stream-disconnect-rejecting-cancel.test.ts	1	// Regression test for mastra #20307.	COMMENT
LOW	deployers/cloudflare/src/index.test.ts	21		COMMENT
LOW	client-sdks/client-js/src/example.ts	41		COMMENT
LOW	client-sdks/client-js/src/example.ts	61	// try {	COMMENT
LOW	…i-sdk/src/__tests__/add-tool-result-message-id.test.ts	201	// The continuation response MUST use the SAME messageId as the	COMMENT
LOW	client-sdks/react/src/lib/mastra-db/accumulator.ts	21	BackgroundTaskEntry,	COMMENT
LOW	workflows/inngest/src/workflow.ts	441		COMMENT
LOW	workflows/inngest/src/actor-signal.test.ts	21	describe('@mastra/inngest actor signal threading (hermetic)', () => {	COMMENT
LOW	…lows/inngest/src/durable-agent/create-inngest-agent.ts	801	// Late-bound reference to the proxy so stream() can pass it to runDurableStreamUntilIdle	COMMENT
LOW	…lows/inngest/src/durable-agent/create-inngest-agent.ts	821	// `cache` or `mastra.serverCache`.	COMMENT
LOW	…lows/inngest/src/durable-agent/create-inngest-agent.ts	1561	});	COMMENT
LOW	…ows/inngest/src/__tests__/create-inngest-agent.test.ts	781	// Parity surface tests	COMMENT
LOW	…ows/inngest/src/__tests__/create-inngest-agent.test.ts	2421	});	COMMENT
LOW	…ws/inngest/src/__tests__/proxyref-verification.test.ts	101	// When stream({ untilIdle: true }) is called:	COMMENT
LOW	…gest/src/__tests__/inngest-durable-agent-suite.test.ts	81	await new Promise(resolve => setTimeout(resolve, 200));	COMMENT
LOW	…gest/src/__tests__/inngest-durable-agent-suite.test.ts	101	// events that never get routed to this run's subscribers.	COMMENT
LOW	.claude/skills/docs-audit/scripts/run-checks.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.claude/skills/mastra-smoke-test/scripts/test-server.sh	1	#!/bin/bash	COMMENT
LOW	…ls/mastra-smoke-test/scripts/discover-release-scope.sh	1	#!/bin/bash	COMMENT
LOW	.claude/skills/builder-smoke-test/scripts/scaffold.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.claude/skills/builder-smoke-test/scripts/scaffold.sh	21	#	COMMENT
LOW	.claude/skills/builder-smoke-test/scripts/preflight.sh	1	#!/usr/bin/env bash	COMMENT
LOW	.claude/skills/builder-smoke-test/scripts/preflight.sh	21	# --workos-organization-id org_... # scaffold auth-on	COMMENT
LOW	…e/skills/builder-smoke-test/scripts/seed-multi-user.sh	1	#!/usr/bin/env bash	COMMENT
LOW	…e/skills/builder-smoke-test/scripts/wait-for-server.sh	1	#!/usr/bin/env bash	COMMENT
LOW	stores/cloudflare-d1/src/storage/rest-api.test.ts	481	// createSampleMessage({	COMMENT
LOW	stores/cloudflare-d1/src/storage/rest-api.test.ts	501	// }),	COMMENT
LOW	stores/cloudflare-d1/src/storage/rest-api.test.ts	521		COMMENT
LOW	stores/cloudflare-d1/src/storage/rest-api.test.ts	541	// {	COMMENT
LOW	stores/cloudflare-d1/src/storage/rest-api.test.ts	561	// resourceId: 'cross-thread-resource',	COMMENT
LOW	stores/cloudflare-d1/src/storage/rest-api.test.ts	581	// resourceId: 'cross-thread-resource',	COMMENT
LOW	…tils/src/domains/observability-vnext/span-aggregate.ts	61	// \|-------\|-------------\|------------------\|------------------\|-------\|--------------\|---------\|---------\|-------------	COMMENT
LOW	stores/_test-utils/src/domains/memory/threads.ts	401	const finalThread = await memoryStorage.getThreadById({ threadId: thread.id });	COMMENT
LOW	stores/_test-utils/src/domains/memory/threads.ts	421	// expect(retrievedThread?.updatedAt.toISOString()).toBe(now.toISOString());	COMMENT
LOW	stores/_test-utils/src/domains/memory/threads.ts	441	// const retrievedThread = await storage.getThreadById({ threadId: thread.id });	COMMENT
LOW	…src/storage/domains/observability/v-next/index.test.ts	3381	],	COMMENT
LOW	…ouse/src/storage/domains/observability/v-next/index.ts	781	}	COMMENT
LOW	…ouse/src/storage/domains/observability/v-next/index.ts	821	// arriving during initialization are captured. ReplacingMergeTree uses	COMMENT
LOW	stores/mongodb/src/vector/index.ts	801	// fresh-process deleteIndex still sees isByo:true and preserves the caller's	COMMENT
LOW	stores/mongodb/src/vector/index.ts	1641	// index. createIndex always declares `document`, except on an autoEmbed index where the	COMMENT
LOW	stores/convex/src/schema.ts	501	// Observational memory table name. Defined locally (not imported from core)	COMMENT
LOW	stores/pg/docker-compose.pooler.yaml	21	# into the user-reported failure mode. Real Supabase deployments	COMMENT
LOW	stores/pg/docker-compose.pooler.yaml	61	DB_NAME: ${POSTGRES_DB:-postgres}	COMMENT
LOW	stores/pg/src/storage/index.test.ts	781	//	COMMENT
LOW	stores/pg/src/storage/test-utils.ts	1161	// domains. Same bug class as #16224 (which originally fixed only the agents	COMMENT
LOW	stores/pg/src/storage/index.ts	201	export class PostgresStore extends MastraCompositeStore {	COMMENT
LOW	stores/pg/src/storage/index.ts	341	}	COMMENT
LOW	…pg/src/storage/domains/observability/v-next/helpers.ts	141	// so return the value unchanged, normalizing null/undefined to undefined.	COMMENT
LOW	…c/storage/domains/observability/v-next/partitioning.ts	161	// the missing day, and a role that may not ATTACH is never asked to for a	COMMENT
LOW	…c/storage/domains/observability/v-next/partitioning.ts	181	// and never touch user input, so the template interpolation is safe.	COMMENT
LOW	…orage/domains/observability/v-next/integration.test.ts	941	// INSERTs to continue against existing partitions in parallel.	COMMENT
LOW	stores/pg/src/storage/db/index.ts	1461	`);	COMMENT
LOW	stores/azure-ai-search/src/vector/integration.test.ts	701		COMMENT
527 more matches not shown…

Modern AI Meta-Vocabulary200 hits · 561 pts

Severity	File	Line	Snippet	Context
MEDIUM	DEVELOPMENT.md	71	pnpm build:rag # RAG package	CODE
MEDIUM	DEVELOPMENT.md	140	pnpm test:rag # RAG tests	CODE
MEDIUM	client-sdks/ai-sdk/README.md	31	- [AI SDK UI integration guide](https://mastra.ai/integrations/agentic-ui/ai-sdk-ui)	CODE
MEDIUM	explorations/longmemeval/docs/INVESTIGATION_WORKFLOW.md	73	├── om.md # Agent's context window	CODE
MEDIUM	…ows/_test-utils/src/domains/tool-workflow-execution.ts	293	// Full agentic loop: LLM → tool → LLM → finish needs extra time	COMMENT
MEDIUM	…ows/_test-utils/src/domains/tool-workflow-execution.ts	346	// Full agentic loop: LLM → tools → LLM → finish needs extra time	COMMENT
MEDIUM	workflows/inngest/src/workflow.ts	52	// in create-inngest-agentic-workflow.ts; any failure in that step is classified	COMMENT
MEDIUM⚡	…t/src/durable-agent/create-inngest-agentic-workflow.ts	310	// Create the main agentic loop workflow with dowhile	COMMENT
MEDIUM	…t/src/durable-agent/create-inngest-agentic-workflow.ts	365	// Run the agentic loop with dowhile	COMMENT
MEDIUM	…ows/inngest/src/__tests__/create-inngest-agent.test.ts	1918	// The agentic loop suspends each tool call under `resumeLabels[toolCallId]`.	COMMENT
MEDIUM	…ows/inngest/src/__tests__/create-inngest-agent.test.ts	1942	// agentic-loop step records the leaf under `__workflow_meta.path`.	COMMENT
MEDIUM	…/inngest/src/__tests__/durable-stop-when-serve.test.ts	2	* Regression test for #25851: the Inngest agentic loop never evaluated `stopWhen`.	COMMENT
MEDIUM	.claude/skills/builder-smoke-test/SKILL.md	259	# Scaffold an auth-on project (re-runs scaffold with WorkOS keys, asserts auth on):	COMMENT
MEDIUM	.claude/skills/builder-smoke-test/references/setup.md	26	### 1. Preflight — scaffold + env vars + mode	COMMENT
MEDIUM	.claude/skills/builder-smoke-test/references/auth.md	61	# 1. Confirm the leak flag is in $PROJECT_DIR/.env (scaffold.sh writes it for auth-on).	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/scaffold.sh	12	# The script lives at <worktree>/.claude/skills/builder-smoke-test/scripts/scaffold.sh	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/scaffold.sh	23	# bash scaffold.sh # auth off, prompt for openai key	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/scaffold.sh	24	# bash scaffold.sh --reuse # skip install if project already healthy	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/scaffold.sh	25	# bash scaffold.sh --dir /custom/path # use a custom project dir	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/scaffold.sh	26	# BUILDER_SMOKE_TEST_DIR=/custom/path bash scaffold.sh # via env var	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/scaffold.sh	27	# bash scaffold.sh --openai-key sk-... # supply key inline	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/scaffold.sh	28	# bash scaffold.sh \	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/scaffold.sh	34	# 0 — scaffold complete (or reused), printed PROJECT_DIR=... AUTH_MODE=...	COMMENT
MEDIUM	.claude/skills/builder-smoke-test/scripts/scaffold.sh	144	echo "# Generated by .claude/skills/builder-smoke-test/scripts/scaffold.sh"	CODE
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/preflight.sh	4	# Calls scripts/scaffold.sh to ensure a hermetic project exists, then	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/preflight.sh	8	# 1. --dir <path> flag (forwarded to scaffold)	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/preflight.sh	15	# bash preflight.sh # scaffold auth-off (prompts for openai if missing)	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/preflight.sh	21	# --workos-organization-id org_... # scaffold auth-on	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/preflight.sh	24	# bash preflight.sh --skip-scaffold # inspect an already-scaffolded project; no install, no .env rewrite	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/preflight.sh	26	# All --openai-key, --workos-*, --dir, --reuse flags are forwarded to scaffold.sh.	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/preflight.sh	27	# --skip-scaffold short-circuits scaffold.sh entirely and just validates the	COMMENT
MEDIUM⚡	.claude/skills/builder-smoke-test/scripts/preflight.sh	33	# 0 — scaffold + checks passed (mode matches --expect if given)	COMMENT
MEDIUM	.claude/skills/builder-smoke-test/scripts/preflight.sh	112	# 1. Resolve PROJECT_DIR without running scaffold.	COMMENT
MEDIUM	.claude/skills/builder-smoke-test/scripts/preflight.sh	129	# 1. Run scaffold. Capture its output so we can extract PROJECT_DIR + AUTH_MODE.	COMMENT
MEDIUM	…/builder-smoke-test/assets/template/src/mastra/auth.ts	35	// and permissions from WorkOS, ensuring scaffold roleMapping edits and	COMMENT
MEDIUM	…convex/src/storage/domains/workflows/workflows.test.ts	48	// Mirrors the structural shape of an `agentic-loop` snapshot whose	COMMENT
MEDIUM	stores/libsql/src/storage/domains/workflows/index.ts	659	// 1. agentic-loop: under a dynamic suspended-step key, hence the json_each() scan	COMMENT
MEDIUM	docs/tests/navigation.spec.ts	641	// ─── Admonitions and tabs on /integrations/agentic-ui/ai-sdk-ui ───────	COMMENT
MEDIUM	docs/styles/ai-tells/MicDrop.yml	110	# "Just/Pure/Clean + noun" standalone fragments: "Pure orchestration." "Just data."	COMMENT
MEDIUM	docs/styles/ai-tells/MicDrop.yml	117	# "Pure orchestration, and the one package that imports from all layers."	COMMENT
MEDIUM	docs/styles/ai-tells/FigurativeSits.yml	19	# point ("sits at the intersection of," "sits at the core of"). The scaffold	COMMENT
MEDIUM	docs/styles/ai-tells/CataphoricForecasting.yml	24	# scaffold noun with a small count is the tell on its own. Literal senses of	COMMENT
MEDIUM	docs/styles/ai-tells/CataphoricForecasting.yml	62	# phase-like scaffolding, so a literal split into physical "parts" or "pieces"	COMMENT
MEDIUM	observability/mastra/src/processor-tracing.test.ts	2162	// This ensures guardrails validate content before persistence	COMMENT
MEDIUM	e2e-tests/client-js/_test-utils/src/server-setup.ts	142	// to the next — which the evented agentic-loop tickles by spreading workflow	COMMENT
MEDIUM	mastracode/sdk/src/headless/run-mc.ts	322	// Count agentic turns (one assistant response = one turn). When the cap is	COMMENT
MEDIUM	packages/core/src/tools/tool.test.ts	217	// own — the value has to survive conversion to a CoreTool (where the agentic	COMMENT
MEDIUM	packages/core/src/tools/tool-builder/builder.ts	790	// use workflows internally for their agentic loop	COMMENT
MEDIUM	packages/core/src/tools/tool-builder/builder.ts	1330	// Preserve tool-level background config so the agentic loop can pick it up	COMMENT
MEDIUM	packages/core/src/llm/model/model.loop.ts	235	// The agentic loop calls setInferenceContext + startInference per-step so the	COMMENT
MEDIUM	packages/core/src/mastra/cross-process-workflow.test.ts	198	// Simulate a nested workflow event (agentic-loop inside execution-workflow)	COMMENT
MEDIUM	packages/core/src/mastra/cross-process-workflow.test.ts	344	// Owner registers the root agentic-loop run.	COMMENT
MEDIUM	packages/core/src/mastra/cross-process-workflow.test.ts	348	// parent chain points to the registered agentic-loop.	COMMENT
MEDIUM	packages/core/src/mastra/index.ts	1045	// agentic-loop wrapping an agentic-execution) keep the scope alive until the	COMMENT
MEDIUM	packages/core/src/mastra/index.ts	1084	// Internal execution-workflows / agentic-loops are run-scoped:	COMMENT
MEDIUM	packages/core/src/mastra/index.ts	1096	// (e.g. `executionWorkflow` inside `agentic-loop`) carry an	COMMENT
MEDIUM	packages/core/src/mastra/index.ts	1098	// but their root parent (the registered agentic-loop) is. If any	COMMENT
MEDIUM	packages/core/src/mastra/index.ts	1763	// The evented workflow engine (used internally by the agentic loop) requires	COMMENT
MEDIUM	packages/core/src/mastra/index.ts	4117	// 1. Internal registry (run-scoped execution-workflow, agentic-loop, etc.)	COMMENT
MEDIUM	packages/core/src/mastra/index.ts	4059	const orchestration = this.#workers.find(w => w.name === 'orchestration');	CODE
140 more matches not shown…

Fake / Example Data263 hits · 276 pts

Severity	File	Line	Snippet	Context
LOW	…adapters/express/src/__tests__/auth-middleware.test.ts	20	token === 'valid-token' ? { id: 'user-1', email: 'user@example.com' } : null,	CODE
LOW	…adapters/express/src/__tests__/auth-middleware.test.ts	105	email: 'user@example.com',	CODE
LOW	…-adapters/elysia/src/__tests__/auth-middleware.test.ts	16	token === 'valid-token' ? { id: 'user-1', email: 'user@example.com' } : null,	CODE
LOW	…er-adapters/hono/src/__tests__/auth-middleware.test.ts	17	token === 'valid-token' ? { id: 'user-1', email: 'user@example.com' } : null,	CODE
LOW	…adapters/fastify/src/__tests__/auth-middleware.test.ts	16	token === 'valid-token' ? { id: 'user-1', email: 'user@example.com' } : null,	CODE
LOW	…ver-adapters/koa/src/__tests__/auth-middleware.test.ts	18	token === 'valid-token' ? { id: 'user-1', email: 'user@example.com' } : null,	CODE
LOW	deployers/cloudflare/src/index.ts	264	/"placeholder": "PLACEHOLDER",/,	CODE
LOW	auth/google/src/index.test.ts	137	email: 'user@example.com',	CODE
LOW	auth/google/src/index.test.ts	181	email: 'user@example.com',	CODE
LOW	auth/google/src/index.test.ts	196	email: 'user@example.com',	CODE
LOW	auth/google/src/index.test.ts	224	payload: { sub: 'u1', email: 'user@example.com', hd: 'example.com', nonce: 'wrong' },	CODE
LOW	auth/google/src/index.test.ts	243	payload: { sub: 'u1', email: 'user@example.com', nonce },	CODE
LOW	auth/google/src/index.test.ts	294	email: 'user@example.com',	CODE
LOW	auth/google/src/index.test.ts	334	email: 'user@example.com',	CODE
LOW	auth/google/src/index.test.ts	361	email: 'user@example.com',	CODE
LOW	auth/google/src/index.test.ts	388	email: 'user@example.com',	CODE
LOW	auth/google/src/index.test.ts	436	email: 'user@example.com',	CODE
LOW	auth/google/src/index.test.ts	518	expect(firstUrl.searchParams.get('userKey')).toBe('user@example.com');	CODE
LOW	auth/google/src/index.test.ts	587	expect(consoleError.mock.calls[0]?.join(' ')).not.toContain('user@example.com');	CODE
LOW	auth/google/src/index.test.ts	628	subject: 'admin@example.com',	CODE
LOW	auth/okta/src/index.test.ts	278	profile: { login: 'user@example.com', email: 'user@example.com', firstName: 'Test', lastName: 'User' },	CODE
LOW	auth/okta/src/index.test.ts	287	email: 'user@example.com',	CODE
LOW	auth/neon/src/index.test.ts	411	email: 'user@example.com',	CODE
LOW	auth/neon/src/index.test.ts	426	email: 'user@example.com',	CODE
LOW	auth/clerk/src/index.test.ts	712	email: 'user@example.com',	CODE
LOW	auth/clerk/src/index.test.ts	724	expect(result.user.email).toBe('user@example.com');	CODE
LOW	auth/auth0/src/index.test.ts	424	email: 'user@example.com',	CODE
LOW	auth/auth0/src/index.test.ts	433	expect(result.user.email).toBe('user@example.com');	CODE
LOW	client-sdks/ai-sdk/src/__tests__/custom-data.test.ts	129	name: 'John Doe',	CODE
LOW	client-sdks/ai-sdk/src/__tests__/custom-data.test.ts	160	expect(customDataChunk.data.user.name).toBe('John Doe');	CODE
LOW	workflows/_test-utils/src/domains/structured-output.ts	168	phone: '555-1234',	CODE
LOW	stores/azure-ai-search/examples/proxy-example.ts	62	credential: 'dummy-key', // Not used when proxy handles auth	CODE
LOW	stores/azure-ai-search/src/vector/index.test.ts	718	const result = translator.translate({ category: { $eq: 'books' }, author: 'Jane Doe' });	CODE
LOW	stores/azure-ai-search/src/vector/index.test.ts	719	expect(result).toBe("category eq 'books' and author eq 'Jane Doe'");	CODE
LOW	…res/azure-ai-search/src/vector/memory-contract.test.ts	185	'user@example.com',	CODE
LOW	stores/astra/src/vector/index.test.ts	428	name: 'John Doe',	CODE
LOW	stores/couchbase/src/vector/index.integration.test.ts	253	text: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et do	CODE
LOW	stores/couchbase/src/vector/index.integration.test.ts	253	text: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et do	CODE
LOW	stores/couchbase/src/vector/index.unit.test.ts	380	text: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et do	CODE
LOW	stores/couchbase/src/vector/index.unit.test.ts	380	text: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et do	CODE
LOW⚡	stores/couchbase/src/vector/index.unit.test.ts	402	text: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et	CODE
LOW⚡	stores/couchbase/src/vector/index.unit.test.ts	402	text: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et	CODE
LOW⚡	stores/couchbase/src/vector/index.unit.test.ts	405	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore	CODE
LOW⚡	stores/couchbase/src/vector/index.unit.test.ts	405	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore	CODE
LOW⚡	stores/couchbase/src/vector/index.unit.test.ts	487	text: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et	CODE
LOW⚡	stores/couchbase/src/vector/index.unit.test.ts	487	text: 'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et	CODE
LOW⚡	stores/couchbase/src/vector/index.unit.test.ts	490	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore	CODE
LOW⚡	stores/couchbase/src/vector/index.unit.test.ts	490	'Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore	CODE
LOW	stores/dsql/src/storage/index.test.ts	201	it('placeholder', () => {});	CODE
LOW	observability/mastra/src/exporters/base.test.ts	377	metadata: { ...span.metadata, userName: 'John Doe', department: 'Engineering' },	CODE
LOW	observability/mastra/src/exporters/base.test.ts	389	userName: 'John Doe',	CODE
LOW	…astra/src/span_processors/senstive-data-filter.test.ts	433	fullName: 'John Doe',	CODE
LOW	…astra/src/span_processors/senstive-data-filter.test.ts	479	content: '{ email": "test@test.com" }',	CODE
LOW	…astra/src/span_processors/senstive-data-filter.test.ts	494	expect(input.messages[0].content).toBe('{ email": "test@test.com" }');	CODE
LOW	observability/datadog/src/compliance.test.ts	70	exporter = new DatadogExporter({ mlApp: 'compliance', apiKey: 'fake-key', agentless: true });	CODE
LOW	e2e-tests/_local-registry-setup/registry.js	77	execSync(`npm config set //localhost:${port}/:_authToken dummy-token`);	CODE
LOW	e2e-tests/_local-registry-setup/registry.js	78	execSync(`pnpm config set //localhost:${port}/:_authToken dummy-token`);	CODE
LOW	browser/agent-browser/src/__tests__/dialog.test.ts	112	const result = await browser.dialog({ triggerRef: '@e3', action: 'accept', text: 'John Doe' });	CODE
LOW	browser/agent-browser/src/__tests__/dialog.test.ts	114	expect(mockDialog.accept).toHaveBeenCalledWith('John Doe');	CODE
LOW	mastracode/factory-ui/e2e/knowledge/explore.spec.ts	357	await expect(search).toHaveAttribute('placeholder', 'Search');	CODE
203 more matches not shown…

Magic Placeholder Names39 hits · 260 pts

Severity	File	Line	Snippet	Context
HIGH⚡	…de/skills/mastra-smoke-test/references/tests/errors.md	33	> Replace `<server-url>` with your environment URL, `<agent-id>` with an agent from your setup, and `<your-api-key>` fro	CODE
HIGH⚡	…de/skills/mastra-smoke-test/references/tests/errors.md	38	-H "Authorization: Bearer <your-api-key>" \	CODE
HIGH⚡	…de/skills/mastra-smoke-test/references/tests/errors.md	44	-H "Authorization: Bearer <your-api-key>" \	CODE
HIGH⚡	…de/skills/mastra-smoke-test/references/tests/errors.md	50	-H "Authorization: Bearer <your-api-key>" \	CODE
HIGH	stores/pinecone/README.md	18	apiKey: 'your-api-key',	CODE
HIGH⚡	stores/pinecone/src/vector/index.ts	40	* apiKey: 'your-api-key',	COMMENT
HIGH⚡	stores/pinecone/src/vector/index.ts	46	* apiKey: 'your-api-key',	COMMENT
HIGH⚡	stores/pinecone/src/vector/index.ts	53	* apiKey: 'your-api-key',	COMMENT
HIGH	stores/azure-ai-search/README.md	19	credential: 'your-api-key',	CODE
HIGH	stores/azure-ai-search/src/vector/index.ts	285	* credential: 'your-api-key'	COMMENT
HIGH	stores/turbopuffer/README.md	18	apiKey: 'your-api-key',	CODE
HIGH	…course/02-agent-tools-mcp/08-getting-zapier-mcp-url.md	18	ZAPIER_MCP_API_KEY=your-api-key-here	CODE
HIGH	observability/_examples/otel-bridge/agent-hub/README.md	28	OPENAI_API_KEY=your-api-key-here	CODE
HIGH	mastracode/sdk/CHANGELOG.md	3817	PARALLEL_API_KEY=your-api-key npx mastracode --prompt "Use web_search to find the latest Mastra release"	CODE
HIGH	mastracode/sdk/CHANGELOG.md	3873	PARALLEL_API_KEY=your-api-key npx mastracode --prompt "Use web_search to find the latest Mastra release"	CODE
HIGH	voice/azure/README.md	19	apiKey: 'your-api-key', // Optional, can use AZURE_API_KEY env var	CODE
HIGH	voice/azure/README.md	24	apiKey: 'your-api-key', // Optional, can use AZURE_API_KEY env var	CODE
HIGH	voice/google/README.md	21	apiKey: 'your-api-key', // Optional, can rely on GOOGLE_API_KEY or ADC	CODE
HIGH	voice/google/src/index.ts	161	* speechModel: { apiKey: 'your-api-key' },	COMMENT
HIGH	voice/murf/README.md	22	apiKey: 'your-api-key', // Optional, can use MURF_API_KEY env var	CODE
HIGH	voice/speechify/README.md	21	apiKey: 'your-api-key', // Optional, can use SPEECHIFY_API_KEY env var	CODE
HIGH	voice/deepgram/README.md	20	apiKey: 'your-api-key', // Optional, can use DEEPGRAM_API_KEY env var	CODE
HIGH	voice/deepgram/README.md	24	apiKey: 'your-api-key', // Optional, can use DEEPGRAM_API_KEY env var	CODE
HIGH	voice/openai-realtime-api/src/index.ts	141	* apiKey: 'your-api-key',	COMMENT
HIGH	voice/elevenlabs/README.md	20	apiKey: 'your-api-key', // Optional, can use ELEVENLABS_API_KEY env var	CODE
HIGH	voice/playai/README.md	20	apiKey: 'your-api-key', // Optional, can use PLAYAI_API_KEY env var	CODE
HIGH⚡	voice/google-gemini-live-api/src/index.ts	65	* apiKey: 'your-api-key',	COMMENT
HIGH⚡	voice/google-gemini-live-api/src/index.ts	75	* speechModel: { name: 'gemini-2.0-flash-live-001', apiKey: 'your-api-key' },	COMMENT
HIGH⚡	voice/google-gemini-live-api/src/index.ts	79	* apiKey: 'your-api-key',	COMMENT
HIGH⚡	voice/openai/README.md	20	apiKey: 'your-api-key', // Optional, can use OPENAI_API_KEY env var	CODE
HIGH⚡	voice/openai/README.md	24	apiKey: 'your-api-key', // Optional, can use OPENAI_API_KEY env var	CODE
HIGH⚡	voice/openai/README.md	33	apiKey: 'your-api-key',	CODE
HIGH⚡	voice/openai/README.md	42	apiKey: 'your-api-key',	CODE
HIGH	packages/create-mastra/CHANGELOG.md	2006	- Improve the overall flow of the `create-mastra` CLI by first asking all questions and then creating the project struct	CODE
HIGH	packages/create-mastra/CHANGELOG.md	2014	- Improve the overall flow of the `create-mastra` CLI by first asking all questions and then creating the project struct	CODE
HIGH	packages/core/scripts/generate-model-docs.ts	106	if (/_API_KEY$\|_KEY$\|_PAT$/.test(envVar)) return 'your-api-key';	CODE
HIGH	packages/cli/src/commands/init/utils.test.ts	264	expect(contents).toBe('ANTHROPIC_API_KEY=your-api-key\n');	CODE
HIGH	packages/cli/src/commands/init/utils.ts	674	`${key}=${apiKey \|\| 'your-api-key'}\n`,	CODE
HIGH	…tes/template-customer-feedback-summarization/README.md	25	OPENAI_API_KEY=your-api-key	CODE

Slop Phrases45 hits · 66 pts

Severity	File	Line	Snippet	Context
LOW	explorations/longmemeval/src/commands/investigate.ts	901	console.log(`\n💡 Don't forget to run: pnpm run sync-improved-om-qa\n`);	CODE
MEDIUM	docs/styles/ai-tells/FigurativeWorth.yml	15	# dummy-subject "It's worth noting that" family, MicDrop the sentence-final	COMMENT
MEDIUM⚡	docs/styles/ai-tells/ClosingPleasantries.yml	59	- Let me know if you need anything else	CODE
MEDIUM⚡	docs/styles/ai-tells/ClosingPleasantries.yml	60	- Let me know if you need further clarification	CODE
MEDIUM⚡	docs/styles/ai-tells/ClosingPleasantries.yml	61	- Let me know if you need any clarification	CODE
MEDIUM	docs/styles/ai-tells/SelfReference.yml	8	- as mentioned earlier	CODE
MEDIUM	docs/styles/ai-tells/SelfReference.yml	13	- as discussed above	CODE
MEDIUM	examples/agent/src/hitl-approval-recall.ts	102	controller.enqueue({ type: 'text-delta', id: 'text-0', delta: 'All done — let me know if you need more.' });	CODE
MEDIUM	examples/agent/src/mastra/agents/approval-demo-agent.ts	95	delta: 'All done — let me know if you need anything else.',	CODE
MEDIUM	examples/agent/src/mastra/agents/model-v2-agent.ts	285	* Another research agent that should NOT be used (for demonstration purposes)	COMMENT
MEDIUM	…evals/src/scorers/llm/tool-call-accuracy/index.test.ts	330	content: 'I cannot provide weather information without checking.',	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-c1a4b69b.json	91	"text": "You will be calling just one primitive at a time to accomplish the user task, every call to	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-c1a4b69b.json	99	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-c1a4b69b.json	194	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-c1a4b69b.json	315	"text": "You will be calling just one primitive at a time to accomplish the user task, every call to	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-c1a4b69b.json	323	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-c1a4b69b.json	418	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-a7373d50.json	62	"text": "You will be calling just one primitive at a time to accomplish the user task, every call to	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-a7373d50.json	70	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-a7373d50.json	165	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-d4f909c5.json	62	"text": "You will be calling just one primitive at a time to accomplish the user task, every call to	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-d4f909c5.json	70	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-d4f909c5.json	237	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-7316c0c7.json	54	"text": "You will be calling just one primitive at a time to accomplish the user task, every call to	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-7316c0c7.json	62	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-7316c0c7.json	207	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-7316c0c7.json	299	"text": "You will be calling just one primitive at a time to accomplish the user task, every call to	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-7316c0c7.json	307	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-7316c0c7.json	453	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-ec76f34b.json	91	"text": "You will be calling just one primitive at a time to accomplish the user task, every call to	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-ec76f34b.json	99	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-ec76f34b.json	194	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-45e4713b.json	62	"text": "You will be calling just one primitive at a time to accomplish the user task, every call to	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-45e4713b.json	70	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-45e4713b.json	230	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-99f429d7.json	83	"text": "You will be calling just one primitive at a time to accomplish the user task, every call to	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-99f429d7.json	91	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	…s__/core-src-agent-agent-gemini.e2e/test-99f429d7.json	186	"text": "\n You are a router in a network of specialized AI agents.\n Your job is to d	CODE
LOW	packages/core/src/loop/network/index.ts	242	## Available Workflows in Network (make sure to use inputs corresponding to the input schema when calling a wo	COMMENT
LOW	packages/core/src/loop/network/index.ts	244	## Available Tools in Network (make sure to use inputs corresponding to the input schema when calling a tool)	COMMENT
MEDIUM	…/memory-integration-tests-src-message-ordering-v6.json	8158	"data: {\"candidates\": [{\"content\": {\"parts\": [{\"text\": \" plan has been fully executed and the task is	CODE
MEDIUM	…gs__/memory-integration-tests-src-agent-memory-v5.json	5486	"text": "I'm unable to save messages directly, but I can help you with any information or assist you i	CODE
MEDIUM	…gs__/memory-integration-tests-src-agent-memory-v5.json	5631	"text": "I'm unable to save messages or store any personal data. However, I can help you with anything	CODE
MEDIUM	…-compat-src-provider-compats-openai-reasoning.e2e.json	1917	"text": "The tool has been called with valid sample data. Let me know if you need anything else!"	CODE
MEDIUM	…ponents/MarkdownRenderer/markdown-renderer.stories.tsx	127	Here's a simple example:	CODE

AI Slop Vocabulary20 hits · 47 pts

Severity	File	Line	Snippet	Context
MEDIUM	stores/libsql/src/storage/domains/harness/index.ts	157	return runPrune({ db: this.#db, domain: 'harness', targets, options, logger: this.logger });	CODE
MEDIUM	docs/styles/ai-tells/FigurativeStays.yml	24	# ("stays robust," "stay aggregated," "stays blocked," "the map stays	COMMENT
MEDIUM	docs/styles/ai-tells/FigurativeNouns.yml	57	# "seamless" belongs to OverusedVocabulary, and "a grain of sand" and	COMMENT
MEDIUM⚡	…/__recordings__/core-src-tools-provider-tools.e2e.json	814	"event: response.output_text.done\ndata: {\"type\":\"response.output_text.done\",\"content_index\":0,\"item_id	CODE
MEDIUM⚡	…/__recordings__/core-src-tools-provider-tools.e2e.json	815	"event: response.content_part.done\ndata: {\"type\":\"response.content_part.done\",\"content_index\":0,\"item_	CODE
MEDIUM⚡	…/__recordings__/core-src-tools-provider-tools.e2e.json	816	"event: response.output_item.done\ndata: {\"type\":\"response.output_item.done\",\"item\":{\"id\":\"msg_003b24	CODE
MEDIUM⚡	…/__recordings__/core-src-tools-provider-tools.e2e.json	819	"data: {\"type\":\"response.completed\",\"response\":{\"id\":\"resp_003b244db9908ccb006a0aef0ea85481968f11de26	CODE
MEDIUM	…/__recordings__/core-src-tools-provider-tools.e2e.json	1766	"event: content_block_start\ndata: {\"type\":\"content_block_start\",\"index\":1,\"content_block\":{\"type\":\	CODE
MEDIUM	…/__recordings__/core-src-tools-provider-tools.e2e.json	1766	"event: content_block_start\ndata: {\"type\":\"content_block_start\",\"index\":1,\"content_block\":{\"type\":\	CODE
MEDIUM	…ings__/core-src-tools-provider-tools-ordering.e2e.json	362	"event: content_block_delta\ndata: {\"type\":\"content_block_delta\",\"index\":22,\"delta\":{\"type\":\"citati	CODE
MEDIUM	packages/core/src/mastra/index.ts	8003	this.#logger?.error('Failed to destroy harness during shutdown', {	CODE
MEDIUM	packages/core/src/processors/processors/skills.test.ts	38	instructions: '# Testing\n\nHelp write comprehensive tests.',	CODE
MEDIUM	…/memory-integration-tests-src-message-ordering-v6.json	3928	"text": "I'll help you research weather patterns in California and create a comprehensive summary. Let	CODE
MEDIUM	…/memory-integration-tests-src-message-ordering-v6.json	4081	"text": "I'll help you research weather patterns in California and create a comprehensive summary. Let	CODE
MEDIUM	…/memory-integration-tests-src-message-ordering-v6.json	4258	"text": "I'll help you research weather patterns in California and create a comprehensive summary. Let	CODE
MEDIUM	…/memory-integration-tests-src-message-ordering-v6.json	4463	"text": "I'll help you research weather patterns in California and create a comprehensive summary. Let	CODE
MEDIUM	…/memory-integration-tests-src-message-ordering-v6.json	4692	"text": "I'll help you research weather patterns in California and create a comprehensive summary. Let	CODE
MEDIUM	…/memory-integration-tests-src-message-ordering-v6.json	5881	"text": "I'll help you research weather patterns in California and create a comprehensive summary. Let	CODE
MEDIUM	packages/mcp/src/client/configuration.e2e.test.ts	318	// Adding a small delay or an explicit trigger if the fixture supported it would be more robust.	COMMENT
MEDIUM	…mplates/template-genui-data-explorer/package-lock.json	15947	"resolved": "https://registry.npmjs.org/robust-predicates/-/robust-predicates-3.0.3.tgz",	CODE

Cross-Language Confusion (JS/TS)7 hits · 35 pts

Severity	File	Line	Snippet	Context
HIGH	…s/daytona/src/sandbox/mounts/s3-r2.integration.test.ts	139	print('5 cross-scope operations denied')	CODE
HIGH	packages/rag/src/document/document.test.ts	775	return False	CODE
HIGH	packages/rag/src/document/document.test.ts	776	return True	CODE
HIGH	packages/rag/src/document/document.test.ts	1057	print(i)	CODE
HIGH	packages/rag/src/document/document.test.ts	1274	print("Hello")	CODE
HIGH	packages/rag/src/document/document.test.ts	2901	print("Hello World")	CODE
HIGH	packages/rag/src/document/document.test.ts	3680	print(f"The result is {z}")	CODE

Example Usage Blocks15 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW	.claude/skills/docs-audit/scripts/run-checks.sh	6	# Usage:	COMMENT
LOW	…ls/mastra-smoke-test/scripts/discover-release-scope.sh	5	# Usage:	COMMENT
LOW	…kills/mastra-smoke-test/scripts/check-versioning-pr.sh	5	# Usage:	COMMENT
LOW⚡	.claude/skills/builder-smoke-test/scripts/scaffold.sh	22	# Usage:	COMMENT
LOW⚡	.claude/skills/builder-smoke-test/scripts/preflight.sh	14	# Usage:	COMMENT
LOW	…e/skills/builder-smoke-test/scripts/seed-multi-user.sh	20	# Usage:	COMMENT
LOW	…e/skills/builder-smoke-test/scripts/wait-for-server.sh	6	# Usage:	COMMENT
LOW	…pg/src/storage/performance-indexes/performance-test.ts	530	// Example usage	COMMENT
LOW	…ql/src/storage/performance-indexes/performance-test.ts	543	// Example usage	COMMENT
LOW	mastracode/web/docker-compose.yml	11	# Usage:	COMMENT
LOW	scripts/install-example.js	95	// Example usage	COMMENT
LOW	scripts/ignore-example.js	102	// Example usage	COMMENT
LOW	scripts/generate-package-docs.ts	291	## How to use	COMMENT
LOW	scripts/test-migration-e2e.sh	11	# Usage:	COMMENT
LOW	…plates/template-factory-self-hosted/docker-compose.yml	3	# Usage:	COMMENT

Redundant / Tautological Comments4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	scripts/test-migration-e2e.sh	137	# Check if test directory exists	COMMENT
LOW	scripts/test-migration-e2e.sh	143	# Check if test file exists	COMMENT
LOW	.github/workflows/test-combined-stores.yml	53	# Check if we should include vectorize tests	COMMENT
LOW	.github/workflows/regenerate-provider-registry.yml	95	# Check if an automated provider registry changeset already exists	COMMENT

Synthetic Comment Markers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	…ates/template-customer-refund-agent/docs/local-demo.md	3	`npm run demo:local` uses mocked support and order data, with responses generated by OpenAI. Every identity, message, or	CODE

Overly Generic Function Names4 hits · 4 pts

Severity	File	Line	Snippet	Context
LOW	packages/core/src/_types/ai-sdk.types.d.ts	4676	export function getData(name: string): ValueOf<typeof data> {	CODE
LOW	packages/rag/src/document/document.test.ts	3956	function processData(data) {	CODE
LOW	…odemod/src/test/__fixtures__/runtime-context.output.ts	22	function handleRequest(requestContext: RequestContext<MyContext>) {	CODE
LOW	…codemod/src/test/__fixtures__/runtime-context.input.ts	22	function handleRequest(runtimeContext: RuntimeContext<MyContext>) {	CODE

Self-Referential Comments1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	…/__recordings__/core-src-tools-provider-tools.e2e.json	1754	"event: content_block_delta\ndata: {\"type\":\"content_block_delta\",\"index\":0,\"delta\":{\"type\":\"input_j	CODE

mastra-ai/mastra

Open-Source Code Quality, Security and Technical Debt Review